Password Page Protection Software allows you to add password protection to any web page. It generates password protection code which is added to the top of a web page to prevent unauthorized access. When the web page is called from the server the password protection code runs before the web page is sent to the user. Instead a password request page is displayed in the users browser. When the user submits a password it is compared to the password set in the page protection code. If they match the protected web page is sent from the server. This provides a high level of security and reliability. The code is fully processed on the server and no secure information can be sent to the user until a password match is confirmed.

• Protection code runs on your server ensuring that protection runs regardless of browser settings.
• Quick and Easy protection code generation.
• Post, Get, Cookie and Session options available for user password retention.
• Password Generator with Length, Upper Case, Lower Case, Numerical options included.

The generated password code runs on your web server and your server must support the php scripting language. Most commercial web servers support php. For information on php and how to check if it is available on your server goto What is php?

In most cases the Use Password should be set in the password protection code as this offers a high level of security and reliability. The code variables are never sent to a users browser and the code is fully processed on the server. The Use Password Not Set method has limited application but may provide the required functionality in some situations.

The password protection code is included at the top of a web page. When the web page is called from the server the password protection code runs before the web page is sent to the user. This results in a password request page being sent from the server and displayed in the users browser. When the user submits a password it is compared to the password set in the page protection code. If they match the protected web page is sent from the server. When a match occurs the submitted password is saved as a Cookie on the users system if Use Cookie is set and the user has not blocked Cookies. It is also saved as a Session variable on the server if Use Sessions is set and Sessions are available. If Cookie Days are not used both the Cookie and the Session are removed once the browser is closed. This allows the protected page to be reloaded without the password being resubmitted but if the browser is closed and then reopened the password must be provided to access the web page. If Cookie Days is used the password will be maintained as a cookie on the users system for the number of days set in Cookie Days. This provides multiple access to the protected page across sessions for the duration of Cookie Days.

If use GET is set in the password protection code a direct call to the protected web page where the url includes the password as a GET query will allow access to the web page without displaying the password request page. The password can also be submitted using a standard form POST, this method is always set as enabled. This is the method used when the password request page is submitted by the user.

The style of password request pages can be set using style sheets and the Use Style variable.

This mode of operation generally not recommended but may provide the required functionality in limited situations. If no Use Password is set in the password protection code then when the web page is called the user is requested to provide the password that will be set as the use password. When submitted this password will be saved as a Cookie on the users system. To do this Use Cookies must be set and the user must not block Cookies. This Cookie remains active for the number of days set in the code as Use Days. Access to the web page from the computer that set the password will require the correct password up until the number of Use Days has elapsed. After this time a new request to set the use password is made. Basically this process allows the user to set the password for themselves. It is not a secure system as the set password can be revealed in the Cookie file. However it does provide low level restriction for computers with multiple users.

• Make confidential information available on the internet but restrict access to password holders.
• Allows protected remote access to web pages providing a secure means of distribution and access.
• Use password protection code to access multiple pages with the same password or set up each with an individual password.
• Exclude previous password holders from web page access by changing the set password in the web page password protection code. Simply change the set password and notify approved users of the new password.
• Operate a time or event based password access system. By changing the set password and notifying approved users a time or event based system can be established. For example monthly access is controlled by changing the set password each month and only advising approved users of the new password.
• Exclude multiple users from accessing web pages from the same computer. Using the Use Password Not Set method web page access from a computer can be restricted to the user that sets the initial password.
• Use the Password Generator to quickly and easily create random passwords to your specifications for whenever a password is required.

Download Password Page Protection Software and Install it on your local system. Then open the PasswordPageProtection.html file in your web browser (JavaScript must be enabled). At the top of the page is the Control Menu.

1. From the Control Menu click Input.
2. Set the Input Variables as required.
3. Click Build Code to generate the password protection code and display it in the Code text area.
4. Select All selects the contents of the Code text area.
5. Then you can either copy paste the password code directly into a web page file or save the password code as a separate file and use an include to add it to any web page.

   To Save directly in a Web Page open the web page file you want to protect in a text editor and paste the selected password code at the very top of the file and save the file.

   To Use the Include Method copy the password code using a text editor and save it as a file with a .php extension (i.e password.php). Then open the web page file you want to protect in a text editor and at the very top of the file add the following <?php include("password.php") ?> where password.php is the name of the file that the password code was saved as.

   Do not use a html editor for this process as it may corrupt the php based password code. Only a text editor should be used to edit both the web page and password code file. It is recommended that any file that includes php code be saved with a .php extension (i.e mypage.php or password.php). Some servers require files to have the extension .php before they will execute php code within the file. If using NotePad as your text editor when you Save, select Save As Type "All Files" and then provide the full File Name i.e "password.php" to ensure a .txt extension is not applied to the file.

6. Upload your web page file and if using the Include Method your password code file to the same directory your web server. Open your web page file from your server in your browser. This will bring up the password input request and if the correct password is submitted the web page will be displayed.

Set the variables for the password protection code.

Password Memory Variables set the way a password will be remembered once input by a user during the current access. If the password cannot be remembered then each time a protected web page is loaded or refreshed the Password Input will be displayed. If the protected page is not required to reload, refresh or link to other password protected pages with the same password then no selection is required. Any combination of memory methods can be selected.

Use Cookies
When selected (checked) the provided password will be saved using Cookies on the users system. This is usually the best password management method, however will only function when Cookies are enabled and not blocked by the user. The default setting is selected.

In the password protection code this appears as $useCook = "true"; when selected and as $useCook = "false"; when not selected. If required this variable can be directly edited in the password protection code using a text editor.

Use GET
When selected (checked) the provided password can be passed using GET variables. Get variables appear as a query after a ? in a url. This method allows you to gain direct access to a password protected page by including the password in the calling url. The default setting is not selected.

GET variables in urls are visible in the url and will appear in the browser history. They should only be used for password protection when computer access is limited to password approved users.

In the password protection code this appears as $useGet = "true"; when selected and as $useGet = "false"; when not selected. If required this variable can be directly edited in the password protection code using a text editor.

Example:

Using GET to include the password mypassword for a password protected web page with the url http://www.mydomain.com/mypage.html the url is

http://www.mydomain.com/mypage.html?pw=mypassword

Use Session
Sessions are a way the server attempts to maintain memory during an access period. Usually sessions use cookies however if sessions cannot be managed using cookies due to a user blocking or restricting cookies your server may automatically add session id's to the end of your urls. Session id's are usually appended to the url as a query in the form ?PHPSESSID=*****. Sessions end when the browser is closed or is inactive and times out. To use this feature Session Support must be enabled in the server php configuration. The default setting is not selected.

In the password protection code this appears as $useSess = "true"; when selected and as $useSess = "false"; when not selected. If required this variable can be directly edited in the password protection code using a text editor.

Cookie Days
This is the number of days a password remembered as a Cookie will remain valid. If left empty the Cookie will expire at the end of the session and the password will need to be re-entered when a new session is commenced. In most cases it should be left empty. It is only applicable if Use Cookies is selected and cookies are enabled by the user. The default setting is empty.

In the password protection code a Cookie Days value of 365 appears as $useCookDays = "365";. If required this variable can be directly edited in the password protection code using a text editor.

The Password Generator can be used to created a password with the selected variables and set it as the Use Password variable. Alternatively the Use Password variable can be manually input.

Letters Upper Case
When selected (checked) Upper Case Letters may be included in the Generated Password. The default setting is selected.

Letters Lower Case
When selected (checked) Lower Case Letters may be included in the Generated Password. The default setting is selected.

Numbers
When selected (checked) Numbers may be included in the Generated Password. The default setting is selected.

Exclude
When selected (checked) characters that may be confusing in the Generated Password are excluded. Excluded characters are 0, O, and 1, I, l. The default setting is selected.

10 Length
This is the number of characters to be used in the Generated Password. The default setting is 10.

This generates a password based on the selected variables and sets it as the Use Password variable.

Use Password
This is the password value that will be set in the Password Page Protection code. It can be automatically created using Generate Password or simply typed directly into the field. In most cases a Use Password should be provided. If left empty and Use Cookies is selected and Cookies are enabled by the user users will be able to set their own password, refer to Use Password Not Set for details.

In the password protection code a Use Password value of 9yiJEtCypo appears as $usePW = "9yiJEtCypo";. If required this variable can be directly edited in the password protection code using a text editor.

Password Days
This is the number of days a User Set password will remain valid. In most cases it should be left empty. It is only applicable if Use Password is left empty, Use Cookies is selected and cookies are enabled by the user. The default setting is empty.

In the password protection code a Password Days value of 365 appears as $useDays = "365";. If required this variable can be directly edited in the password protection code using a text editor.

Style Sheet
This is the url of the Style Sheet applied to the Password page. It should be the full url of a valid cascading style sheet (css). If left empty default styles will be applied. The default setting is empty.

In the password protection code a Style Sheet value of http://www.mydomain.com/mystyle.css appears as $useStyle = "http://www.mydomain.com/mystyle.css";. If required this variable can be directly edited in the password protection code using a text editor.

Builds the password protection code and displays it in the Code text area for inclusion in your web pages.

Generated password protection code is displayed in the Code Text area.

This text area contains the password page code generated when you Build Code.

You can either copy and paste the password code directly into a web page file or save the password protection code as a separate file and use an include to add it to any web page.

• To use the web page direct paste method open the web page file you want to protect in a text editor and paste the password protection code at the very top of the file and save the file.
• or
• To use the include method paste the password protection code in a text editor and save it as a file with a .php extension (i.e password.php). Then open the web page file you want to protect in a text editor and at the very top of the file add the following <?php include("password.php") ?> where password.php is the name of the file that the password protection code was saved as.

Do not use a html editor for any of this process as it may corrupt php based code. Only a text editor should be used to edit both the web page and password protection code file. It is recommended that any file that includes php code be saved with a .php extension (i.e mypage.php or password.php). Some servers require files to have the extension .php before they will execute php code within the file. If using NotePad as your text editor when you Save, select Save As Type "All Files" and then provide the full File Name i.e "password.php" to ensure a .txt extension is not applied to the file.

Upload your web page file and if using the Include Method your password protection code file to your web server and open your web page file in your browser. This will bring up the password input request and if the correct password is submitted the web page will be displayed. Files should be uploaded to the same directory.

Selects the contents of the Code text area.

Clears the contents of the Code text area.

Open the Help file (this file) in a new window.

Displays registration status and links for registration. Register software using the secure online payment link. Registration details are sent by return email and will enable all functions. Once registered the current registration and an Upgrade to Additional Licenses link are displayed. Only registered software and code built using registered software will continue functioning.

Go to software developer web site, www.softswot.com.

This section covers both the Software that generates the code and the Code that runs on your server. For items not addressed here and elsewhere in the Help file please visit softSWOT.com where you can access our Question and Answer Items. In our Question and Answer Items we post responses to a range of topics related to this software. It provides a growing knowledge base and allows you to benefit from the experience of others, if you have read all of the Help file and still have a question this is a good place to start. The fastest way to solve a problem is usually by completely reading and following the Help file, and reviewing our Question and Answer Items. If after this your question remains please Contact Us.

If the software displays a Browser Error notice:

• Your browser may be blocking or disabling JavaScript or restricting Active Content. This software requires JavaScript to be enabled. Follow your browser help instructions to unblock/enable JavaScript or Allow Blocked Content
• Your browser may require upgrading. This software requires a 5th Generation browser. Mozilla Firefox from version 1.0 or Microsoft Internet Explorer from version 5.5 (Windows 98) are recommended. Mozilla FireFox or Microsoft Internet Explorer browsers can be downloaded free of charge.

Once you have current browser software with JavaScript enabled you will be able to access all software functions.

If the password php code displays in your browser when it is run on your server:

• Make sure you are calling the file from your server ie http://www.mydomain.com/mypage.php not from your local system. Desk top computers do not usually run php. The php code will only run when the file has been uploaded and run on a server that supports php.
• Check that your server supports php using the Test Code at What is php?
• Your server may require files to have the extension .php before it will execute php code. In this case you should rename all files that include php code with a .php extension ie rename mypage.html to mypage.php.
• Your php code may be corrupted. Do not use normal html editors to open any file that includes php code as the php code may be corrupted. It is recommended that only a text editor is used to add php code to a file or modify a file that includes php code. If you wish to use a html editor we recommend (and use) HTML-Kit. HTML-Kit is a free standards compliant editor that unlike most html editors (Front Page, DreamWeaver etc) produces clean valid html and will not corrupt php code. Do not use normal html editors to open or save any file that includes php code.

Make sure all your variable values are correct. This includes the case of letters, A is not the same as a.

The software runs directly in your browser. Your browser must support JavaScript and the Document Object Model. Current browsers all support these features. If your browser does not support these features a Browser Error notification will be provided when you open the software.

The generated code runs on your web server. To run this code your server must support the php scripting language. Most commercial web servers support php. For information on php and how to check if it is available on your server go to What is php?

The latest version software is always available for download from softSWOT.com. If software is downloaded as a Self-Extracting SetUp file (.exe) when you run the .exe file it will extract and install the software files. If software is downloaded as a Compressed Zip file (.zip) it must be unzipped before you can save the software files. Trial Zip software is available free from Winzip or a simple freeware zip utility is available from JustZIPit. All software files should be installed in the same directory, this should be a new directory in which only the software files are placed. Once the software files are saved open the software title file (with a .html extension). This will open in your browser; JavaScript must be enabled; and follow the Instructions for Use.

This software does not access or alter your system or system files in any way. To uninstall you can simply delete the directory and included software files created and saved when you installed the software. Alternatively if a Self-Extracting SetUp file was used for installation you will be able to remove the software using Uninstall from the shortcut menu.

The specific suitability of this software must be independently assessed. Software is provided as is, use is entirely at the users risk, and use acknowledges that softSWOT and all associated parties are held harmless from any claims or losses relating to software provided.

For items not addressed here please visit softSWOT.com where you can access our Question and Answer Items. In our Question and Answer Items we post responses to a range of topics related to this software. It provides a growing knowledge base and allows you to benefit from the experience of others, if you have read all of the Help file and still have a question this is a good place to start. If after completely reading and following the Help file, and reviewing our Question and Answer Items your question is unanswered please Contact Us.

Web Site: www.softswot.com

Full contact details are provided at Contact Us.

softSWOT is a member of the Bizpep Group
ABN: 24 312 166 103

Regards
David Morcom
www.softswot.com